Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8O-chQiDirLf-vIreiJHzSBB-Uo.roa
File:                     8O-chQiDirLf-vIreiJHzSBB-Uo.roa (raw, json)
Hash identifier:          fLoiTfFHmyWHyiBPgXgH+mGUi2uOiF9y74dsCF/J+nQ=
Subject key identifier:   F0:EF:9C:85:08:83:8A:B2:DF:FA:F2:2B:7A:22:47:CD:20:41:F9:4A
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018CD7D3C1C0F08306A0BF72FB558DEC11FA
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8O-chQiDirLf-vIreiJHzSBB-Uo.roa
Signing time:             Fri 05 Jan 2024 04:13:48 +0000
ROA not before:           Fri 05 Jan 2024 04:13:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:d7:d3:c1:c0:f0:83:06:a0:bf:72:fb:55:8d:ec:11:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Jan  5 04:13:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f0ef9c8508838ab2dffaf22b7a2247cd2041f94a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d1:a9:16:70:9c:68:ca:fc:f5:46:dd:af:39:
                    ff:8d:84:2d:70:80:a3:1f:1c:19:1b:54:2b:2d:45:
                    a5:49:63:f9:1c:90:7b:d1:06:66:78:eb:21:dc:1d:
                    e8:d1:db:aa:2d:a9:0f:26:f7:6f:eb:64:40:48:5b:
                    73:d1:24:0a:f1:33:23:cd:3e:d8:db:5c:a7:90:3a:
                    e0:c4:63:6b:fa:c3:c5:41:b3:2b:52:67:1d:7f:a9:
                    a8:f1:ff:bc:82:7c:b8:0e:1f:e3:fb:2c:0b:ee:23:
                    5e:df:7c:7f:c4:13:06:aa:2e:1f:e5:e2:91:80:70:
                    cc:39:d1:ae:01:f8:77:19:4c:2a:f0:27:0b:7b:8c:
                    de:05:e3:b0:77:3e:e3:b7:66:a6:f6:6a:ce:80:cb:
                    b6:82:33:3b:28:48:95:7b:1e:eb:64:b3:fe:92:79:
                    70:a5:0a:6f:d0:34:1c:9b:53:ef:bc:7c:17:43:21:
                    04:45:ca:3a:80:80:db:46:db:10:a6:dd:a6:76:dc:
                    ae:82:ea:52:76:7d:fc:23:a7:71:81:fd:e8:6f:3f:
                    58:4c:70:a8:8d:e9:f1:a3:67:c1:be:ac:3f:4d:58:
                    eb:46:2f:14:fb:4c:5c:6d:c1:24:a3:0f:13:37:e7:
                    52:ff:7d:ee:8d:79:e8:e6:f1:9b:cb:31:1c:c1:bf:
                    53:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:EF:9C:85:08:83:8A:B2:DF:FA:F2:2B:7A:22:47:CD:20:41:F9:4A
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/8O-chQiDirLf-vIreiJHzSBB-Uo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:be:80:59:26:a2:98:a1:5c:da:2c:c0:3d:25:83:36:6b:ba:
         a2:c5:d3:cb:e5:43:ab:fd:11:8d:39:43:ec:1a:a4:94:7b:bf:
         33:9c:01:35:e6:cf:fa:78:90:25:34:62:85:d6:b9:05:66:c2:
         25:4e:d8:70:29:26:7f:f3:c0:48:3c:df:05:08:ac:d1:13:3e:
         0b:11:23:27:81:e2:62:47:6c:37:13:83:90:a0:32:67:9f:4f:
         3d:1c:7f:e1:98:87:ef:ad:77:13:2d:7f:e5:a3:a7:cb:fe:6e:
         18:eb:91:f0:32:63:6d:7c:93:7c:2b:10:0d:08:9f:25:37:50:
         63:4a:5e:f0:80:ce:88:0e:ef:50:19:61:ed:c8:63:41:0a:46:
         54:6b:cc:e3:01:05:12:22:21:14:52:ae:c8:fa:1f:2c:53:cf:
         f2:3e:55:69:26:4f:cd:6e:8a:43:76:72:d7:97:e7:a2:c4:78:
         c4:ac:72:41:f1:12:49:94:d8:ae:2d:9d:5e:d7:20:d4:c4:89:
         cd:6a:79:8c:cb:4c:28:9a:36:bd:f4:ee:c6:7b:df:57:c6:bf:
         3f:da:47:27:c7:bc:19:6a:a1:ad:bc:f0:8c:fd:09:18:6c:5d:
         31:49:45:f2:af:4b:aa:5d:df:ed:b8:74:a0:07:43:da:fe:c7:
         eb:f6:d1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----